Earlier quoted context omitted.
Electron apps should stay in the browser as the Web apps they are.
And if the browser provided unrestricted file access they probably would. But we'd all be in trouble
Just because something runs under my id, doesn't mean I want it to read everything I have in $HOME without me knowing about it, and possibly sharing it with the world.
On my systems, every sandbox option I can enable is turned on.